![Maven Central Adds Sigstore Signature Validation](https://cdn.sanity.io/images/cgdhsj6q/production/7da3bc8a946cfb5df15d7fcf49767faedc72b483-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Maven Central Adds Sigstore Signature Validation
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
A JavaScript implementation of the Lempel-Ziv-Markov (LZMA) chain compression algorithm
LZMA-JS is a JavaScript implementation of the Lempel-Ziv-Markov (LZMA) chain compression algorithm.
Two things: speed & size.
LZMA-JS 2.x now minifies to smaller than one fourth of 1.x and in some cases is 1,000x faster (particularly with high compression).
It is also more modular. The compression and decompression algorithms can be optionally separated to shrink the file size even more.
Here are some file size stats:
Filename | Method(s) | Minified | Gzipped |
---|---|---|---|
lzma_worker.js | both | 23.4 KB | 9.2 KB |
lzma-c.js | compression | 17.9 KB | 7.3 KB |
lzma-d.js | decompression | 6.8 KB | 3.0 KB |
Also, older versions returned compressed data as unsigned bytes. Now, it returns signed bytes.
Live demos can be found here.
LZMA-JS is available in the npm repository.
npm install lzma
If you are using bower, you can download the source like this:
bower install lzma
First, load the bootstrapping code.
<!-- In a browser -->
<script src="../src/lzma.js"></script>
Create the LZMA object.
/// LZMA([optional path])
/// If lzma_worker.js is in the same directory, you don't need to set the path.
var my_lzma = new LZMA("../src/lzma_worker.js");
(De)Compress stuff asynchronously:
/// To compress:
///NOTE: mode can be 1-9 (1 is fast and pretty good; 9 is slower and probably much better).
///NOTE: compress() can take a string or an array of bytes.
/// (A Node.js Buffer or a Uint8Array instance counts as an array of bytes.)
my_lzma.compress(string || byte_array, mode, on_finish(result, error) {}, on_progress(percent) {});
/// To decompress:
///NOTE: By default, the result will be returned as a string if it decodes as valid UTF-8 text;
/// otherwise, it will return a Uint8Array instance.
my_lzma.decompress(byte_array, on_finish(result, error) {}, on_progress(percent) {});
(De)Compress stuff synchronously (not recommended; may cause the client to freeze):
/// To compress:
///NOTE: You'll need to do your own error catching.
result = my_lzma.compress(string || byte_array, mode);
/// To decompress:
result = my_lzma.decompress(byte_array);
After installing with npm, it can be loaded with the following code:
var my_lzma = require("lzma");
The decompress()
function needs an array of bytes or a Node.js Buffer
object.
If the decompression progress is unable to be calculated, the on_progress()
function will be triggered once with the value -1
.
LZMA-JS will try to use Web Workers if they are available. If the environment does not support Web Workers,
it will just do something else, and it won't pollute the global scope.
Each call to LZMA()
will create a new Web Worker, which can be accessed via my_lzma.worker()
.
LZMA-JS was originally based on gwt-lzma, which is a port of the LZMA SDK from Java into JavaScript.
If you'd prefer not to bother with Web Workers, you can just include lzma_worker.js
directly. For example:
<script src="../src/lzma_worker.js"></script>
That will create a global LZMA
object that you can use directly. Like this:
LZMA.compress(string || byte_array, mode, on_finish(result, error) {}, on_progress(percent) {});
LZMA.decompress(byte_array, on_finish(result, error) {}, on_progress(percent) {});
Note that this LZMA
variable is an Object
, not a Function
.
In Node.js, the Web Worker code is already skipped, so there's no need to do this.
And if you only need to compress or decompress and you're looking to save some bytes, instead of loading lzma_worker.js, you can simply load lzma-c.js (for compression) or lzma-d.js (for decompression).
Of course, you'll want to load the minified versions if you're sending data over the wire.
LZMA-JS is compatible with anything that is compatible with the reference implementation of LZMA, for example, the lzma
command.
FAQs
A JavaScript implementation of the Lempel-Ziv-Markov (LZMA) chain compression algorithm
The npm package lzma receives a total of 17,322 weekly downloads. As such, lzma popularity was classified as popular.
We found that lzma demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.